CVE-2016-2386 is a high-severity SQL injection vulnerability in the UDDI server component of SAP NetWeaver J2EE Engine 7.40. It allows remote attackers to execute arbitrary SQL commands via unspecified vectors. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2016-2388 is a high-severity information disclosure vulnerability in SAP NetWeaver AS JAVA 7.4. It allows remote attackers to obtain sensitive user information by sending a crafted HTTP request to the Universal Worklist Configuration component. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
QNAP Photo Station contains a path traversal vulnerability that allows remote attackers to access or modify system files. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. It affects QNAP devices running Photo Station. No specific affected versions or patch information is provided.
QNAP Photo Station contains a path traversal vulnerability that allows remote attackers to access or modify system files. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. It affects QNAP devices running Photo Station. No specific affected versions or patch information is provided.
CVE-2019-7193 is an improper input validation vulnerability in QNAP QTS that allows remote attackers to inject code on the system. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
QNAP NAS devices running Photo Station have an improper access control vulnerability (CVE-2019-7192) that allows remote attackers to gain unauthorized access. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided.
CVE-2019-5825 is an out-of-bounds write vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to potentially cause heap corruption by crafting a malicious HTML page. This vulnerability affects multiple web browsers that use Chromium's V8 engine, including Google Chrome, Microsoft Edge, and Opera. Exploitation of this flaw has been observed in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2019-15271 is a deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers. This flaw could allow an attacker to execute code with root privileges on affected devices. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2018-6065 is an integer overflow vulnerability in the Google Chromium V8 JavaScript engine. It allows remote attackers to potentially cause heap corruption by crafting malicious HTML pages. This vulnerability affects multiple web browsers that use the Chromium engine, including Google Chrome, Microsoft Edge, and Opera. Exploits for this vulnerability have been observed in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2018-4990 is a double free vulnerability in Adobe Acrobat and Reader that can lead to remote code execution. This vulnerability has been exploited in the wild, indicating active attacks leveraging this flaw. No specific affected versions or patch information is provided in the available data.
CVE-2018-17480 is an out-of-bounds write vulnerability in the Google Chromium V8 JavaScript engine. This flaw allows a remote attacker to execute code within the sandbox environment by delivering a specially crafted HTML page. Multiple Chromium-based browsers, including Google Chrome, Microsoft Edge, and Opera, may be affected. Exploitation of this vulnerability has been observed in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2018-17463 is a high-severity remote code execution vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to execute code within the sandbox environment by delivering a crafted HTML page. This vulnerability affects multiple web browsers that use the Chromium engine, such as Google Chrome, Microsoft Edge, and Opera. Exploits have been observed in the wild. No specific affected versions or patch information is provided in the available data.
Multiple NETGEAR devices are affected by a buffer overflow vulnerability that enables authentication bypass and remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
CVE-2017-5070 is a type confusion vulnerability in the Google Chromium V8 JavaScript engine that allows remote attackers to execute code within the sandbox by delivering a crafted HTML page. This affects multiple Chromium-based browsers including Google Chrome, Microsoft Edge, and Opera. The vulnerability has been exploited in the wild.
CVE-2017-5030 is a memory corruption vulnerability in the Google Chromium V8 JavaScript engine that allows remote code execution via a crafted HTML page. This flaw affects multiple web browsers using Chromium's V8 engine, including Google Chrome, Microsoft Edge, and Opera. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2016-5198 is an out-of-bounds memory access vulnerability in the Google Chromium V8 JavaScript engine. This flaw allows remote attackers to perform arbitrary read and write operations, potentially leading to code execution when a user visits a crafted HTML page. Multiple web browsers that use Chromium, such as Google Chrome, Microsoft Edge, and Opera, may be affected. Exploits for this vulnerability have been observed in the wild. No specific affected versions or patch information are provided in the input data.
CVE-2016-1646 is an out-of-bounds read vulnerability in the Google Chromium V8 JavaScript engine. It allows remote attackers to cause denial of service or potentially other unspecified impacts by supplying crafted JavaScript code. This vulnerability affects multiple web browsers that use the Chromium engine, including Google Chrome, Microsoft Edge, and Opera. Exploits for this vulnerability have been observed in the wild. No explicit patch information is provided in the input data.
CVE-2013-1331 is a buffer overflow vulnerability in Microsoft Office that allows remote attackers to execute arbitrary code by crafting malicious PNG data embedded in an Office document. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
Adobe Flash Player has an integer overflow vulnerability (CVE-2012-5054) that enables remote attackers to execute arbitrary code by supplying malformed arguments. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2012-4969 is a use-after-free vulnerability in Microsoft Internet Explorer that allows remote attackers to execute arbitrary code by tricking users into visiting a crafted website. This vulnerability has been exploited in the wild, indicating active attacks leveraging this flaw. No specific affected versions or patch information is provided in the input data.